Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File:                     E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier:          dqUUaK5eZv31gwhPqHg8AQ0RZE8Kw354TMGt+NubKEk=
Subject key identifier:   FF:9D:30:FE:2E:78:21:27:7F:24:0B:54:A0:A5:E3:9F:73:42:63:5E
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer:       /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial:       019FA9ABF6298FA3D94AE55FF06A5A3CA052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number:          10BB
Signing time:             Tue 28 Jul 2026 17:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:46 +0000
Files and hashes:         1: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: QqqTbMS4/rbO/colLrioA6f2720VOwfjAD/PaGlIAH0=)
                          2: m_4G_0Oxit4jN9Mi8en63Te59ko.roa (hash: NR2mOcFmt971BLwl94JPSXCXHeE7+txzuM2W8JbnNaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:f6:29:8f:a3:d9:4a:e5:5f:f0:6a:5a:3c:a0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
        Validity
            Not Before: Jul 28 17:00:46 2026 GMT
            Not After : Jul 29 17:00:46 2026 GMT
        Subject: CN=ff9d30fe2e7821277f240b54a0a5e39f7342635e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:86:97:2e:61:69:d0:05:3f:5f:ac:e3:8d:
                    6d:66:48:f1:e0:af:e0:68:d0:7a:b1:37:cc:c3:36:
                    9b:03:b5:55:6a:51:9d:2b:b5:e9:6f:08:2a:85:39:
                    0f:f3:69:a0:7e:74:b7:c6:d1:b6:bd:47:74:5a:5c:
                    2b:f7:b8:9b:a0:91:af:2b:0a:a0:04:fc:c5:9a:d9:
                    85:a0:c0:f7:0c:11:63:0c:dd:cf:57:e7:a0:2f:ed:
                    0b:de:bd:f7:f7:98:08:00:e8:a1:46:64:01:c4:01:
                    d1:12:97:a7:4c:d7:d2:56:30:04:72:16:5f:d9:c1:
                    ea:8a:a4:7b:a4:79:c5:26:dc:87:50:af:32:7f:3b:
                    6d:85:95:38:21:6a:2b:55:96:9e:6f:d7:ba:5b:68:
                    44:88:fb:10:76:8d:da:a9:09:2b:51:cd:0e:61:5a:
                    6b:ff:45:43:73:83:30:47:c7:47:c1:cd:f6:26:b8:
                    a8:c9:1d:ab:d3:fd:85:2f:fc:30:25:e0:20:86:4b:
                    b9:f4:ad:af:83:70:4b:51:cf:59:96:19:5a:ee:88:
                    c5:2a:58:17:29:7b:64:cb:1f:35:6a:55:d3:53:ec:
                    0c:30:35:4a:72:33:c9:b3:91:ce:87:52:04:2e:9a:
                    b4:cd:cf:08:dd:88:2a:21:7f:5e:b2:6f:c0:5a:a6:
                    2b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9D:30:FE:2E:78:21:27:7F:24:0B:54:A0:A5:E3:9F:73:42:63:5E
            X509v3 Authority Key Identifier:
                keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f6:61:8a:3d:cc:30:9d:4d:5c:00:07:6d:b9:c2:3f:a4:9e:
         da:04:b1:c6:ad:e4:87:f8:3a:c6:1c:68:da:41:b3:34:49:c2:
         33:d0:9a:47:83:7b:43:1f:38:4c:92:1d:1e:75:9d:22:ce:98:
         d0:00:b4:8e:65:b1:38:eb:27:f3:4b:ad:95:e0:00:c5:e8:04:
         f2:8a:c1:d8:2a:ed:fd:3f:d6:de:b0:5b:8a:15:98:da:9e:4c:
         6e:ed:d7:f9:16:4c:b6:a7:8a:b9:80:bc:d3:cf:bf:85:05:f8:
         c1:a6:24:62:3f:6f:ba:c0:0f:7e:cb:48:1f:d0:a1:80:3c:e1:
         32:f5:2c:e2:83:da:0d:fe:e6:73:e0:fc:ab:23:2e:b8:2c:55:
         53:b8:8b:d6:f3:ec:8c:86:01:f3:d4:a6:06:d3:00:9b:3d:60:
         9a:5b:b9:04:63:d4:19:d5:c6:27:ac:a2:b1:b5:6e:46:73:bb:
         48:1d:e1:1e:67:83:89:87:fe:2f:8f:c5:af:9b:28:47:fe:5d:
         5d:05:c8:3b:54:cb:3c:c1:1e:2c:b8:f5:bf:71:95:86:f2:a1:
         8a:79:7e:3b:65:2d:26:79:81:10:b5:12:f7:d5:cf:0a:37:95:
         69:b3:d6:f3:14:c5:b7:fd:c4:0f:9f:11:60:40:7a:0d:4c:e4:
         58:64:5b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:03 2026 by rpki-client